CVE-2005-2769

Published: 2 September 2005

Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 and possibly other versions allows remote attackers to inject arbitrary web script or HTML via an HTML e-mail containing tags with strings that contain ">" or other special characters, which is not properly sanitized by SqWebMail.

Status

References

• https://ubuntu.com/security/notices/USN-201-1
• https://www.cve.org/CVERecord?id=CVE-2005-2769
• NVD
• Launchpad
• Debian